api.midvash.com is a public, read-only API with no user accounts. Still, if you find a vulnerability (a way to reach data outside the public Bible catalog, poison the edge cache, run up costs, or inject content into responses), please tell us privately.

• Use GitHub's private vulnerability reporting, or
• email contact@midvash.com with the subject Security: bible-api.

Please do not open a public issue for a security problem.

We aim to answer within 5 business days. Only the code on main (what runs at api.midvash.com) is supported.